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Computer Crime Section 


Re: Dale A. Wein, Prof. LLC - Incident Notification 


Dear Sir or Madam: 


McDonald Hopkins PLC represents Dale A. Wein, Prof LLC (“Wein”). I write to provide 
notification concerning an incident that may affect the security of personal information of four 
(4) Virginia residents. Wein’s investigation is ongoing and this notification will be 
supplemented with any new significant facts or findings subsequent to this submission, if any. 
By providing this notice, Wein does not waive any rights or defenses regarding the applicability 
of Virginia law or personal jurisdiction. 

On July 12, 2016, Wein discovered that as a result of a sophisticated network intrusion 
between late May 2016 and July 12,2016, an unauthorized third party gained access to one of its 
servers. Upon learning of the issue, Wein immediately commenced a full investigation, 
including notifying the U.S. Trustee’s Office and law enforcement. Also as part of the 
investigation, Wein has been working very closely with external cybersecurity professionals that 
regularly investigate and analyze these types of incidents. The investigation and remediation 
efforts are now completed, and Wein has removed the infection from its system. Wein also 
immediately changed passwords and took other steps to enhance the security of its network. 

Based on the comprehensive forensic investigation and document review, which was 
concluded on September 1, 2016, Wein cannot conclusively determine whether the unauthorized 
party actually acquired or viewed any personal information. Wein confirmed that the 
unauthorized party may have accessed some personal information within the infected server, 
including full names and Social Security numbers. 

To date, Wein is not aware of any confirmed instances of identity fraud as a direct result 
of this incident. Nevertheless, Wein wanted to make you (and the affected residents) aware of 
the incident and explain the steps Wein is taking to help safeguard the residents against identity 
fraud. Wein provided the Virginia residents with written notice of this incident commencing on 
October 1,2016, in substantially the same form as the letter attached hereto. Wein is offering the 
residents a complimentary membership with a credit monitoring and identity theft protection 
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service and is providing dedicated call center support to answer questions. Wein has advised the 
residents to remain vigilant in reviewing financial account statements for fraudulent or irregular 
activity. Wein has advised the residents about the process for placing a fraud alert on their credit 
files, placing a security freeze, and obtaining a free credit report. The residents also have been 
provided with the contact information for the consumer reporting agencies and the Federal Trade 
Commission. 


Wein takes its obligation to help protect personal information very seriously. Wein is 
continually evaluating and modifying its practices to enhance the security and privacy of 
personal information. 

Should you have any questions regarding this notification, please contact me at (248) 
220-1356 or dpaluzzi@mcdonaldhopkins.com. 


Sincerely, 



Dominic A. Paluzzi 


Enel. 
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IMPORTANT INFORMA TION 
PLEASE READ CAREFULLY 



The privacy of your personal information is of the utmost importance to Dale A. Wein, 
Prof. LLC. I am writing with important information about a recent incident involving the security 
of some of the personal information that we maintain as a result of being appointed as your 
trustee. We want to provide you with information regarding the incident and explain the services 
we are making available to help safeguard you against identity fraud. We also are providing 
additional steps you can take to help protect your information. 

On July 12, 2016, we discovered that as a result of a sophisticated network intrusion 
between late May 2016 and July 12, 2016, an unauthorized third party gained access to one of 
our servers. Upon learning of the issue, our incident response team promptly launched an 
investigation and notified the U.S. Trustee's Office and law enforcement. As part of our 
investigation, we have been working very closely with a cybersecurity firm that regularly 
investigates and analyzes these types of incidents. Their investigation and remediation efforts 
are now completed, and we have removed the infection from our system. We also immediately 
changed passwords and took other steps to enhance the security of our network. 

We have devoted considerable time and effort to determine what exact information may 
have been contained in the affected server and, as such, may be at risk of disclosure. However, 
based on our comprehensive forensic investigation and document review, which was concluded 
on September 1, 2016, we cannot conclusively determine whether the unauthorized party 
actually acquired or viewed any of your personal information. Because we value our relationship 
with you, we wanted to make you aware of this incident because the unauthorized party may 
have accessed some of your personal information within the infected server, including your full 
name and Social Security number. 

To date, we are not aware of any reports of identity fraud or improper use of 
information as a direct result of this incident. 
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However, to protect you from potential misuse of your information, we are providing you 
with one year of free credit monitoring and identity theft protection services. Enclosed in this 
letter, you will find information on enrolling in a 12-month membership of Experian's 
ProtectMylD® Alert, a credit monitoring and identity theft protection service, along with other 
precautionary measures you can take to protect your personal information, including placing a 
Fraud Alert, placing a Security Freeze, and/or obtaining a free credit report. Additionally, you 
should always remain vigilant in reviewing your financial account statements for fraudulent or 
irregular activity on a regular basis. 

Please accept my sincere apologies, on behalf of Dale A. Wein, Prof. LLC, that this incident 
occurred - we deeply regret any inconvenience or concern this issue may cause you. 
Safeguarding the privacy and security of your personal information is a top priority, and we are 
taking proactive steps to strengthen our IT systems moving forward to help prevent similar issues 
in the future. 

If you have any further questions regarding this incident, please call our dedicated and 
ttyrffa^^^^^^free response line that we have set up to respond to questions at 

■■■■■This response line is staffed with professionals familiar with this incident and 
knowledgeable on what you can do to protect against misuse of your information. The response 
line is available Monday through Friday, 8 a.m. to 8 p.m. CST. 

Sincerely, 



{63396112} 




- OTHER IMPORTANT INFORMATION - 


1- Enrolling in Complimentary 12-Month Credit Monitoring . 

Protecting your personal information is important to Dale A. Wein, Prof. LLC. In response to this security 
incident and as a precautionary measure, we have arranged for you to enroll in Experian’s® ProtectMylD® 
Alert for a one year period at no cost to you. This protection is provided by Experian, one of the three 
major nationwide credit reporting companies. 


Activate Experian V s ProtectMylD Now in Three Easy Steps: 

1. ENSURE that you enroll by££££££££££^|£| 

2. VISIT the ProtectMylD Web Site to enroll: HHHIIIHHHHI 

3. PROVIDE your 9-character Activation Code: HHHHHI 

If you have question^^MM^^^^mialtetnative to enrolling online, please call 
provide Engagement flBBBlHB 

Additional Details Regarding Your 12-Month ProtectMylD Membership: 

A credit card is not required for enrollment. 


Once your ProtectMylD membership is activated, you will receive the following features: 

■ Free copy of your Experian credit report 

■ Surveillance Alerts for: 

o Daily Bureau Credit Monitoring: Alerts of key changes & suspicious activity found on 
your Experian, Equifax® and TransUnion® credit reports. 

• Identity Theft Resolution & ProtectMylD ExtendCARE: Toll-free access to US-based 
customer care and a dedicated Identify Theft Resolution agent who will walk you through the 
process of fraud resolution from start to finish for seamless service. They will investigate each 
incident; help with contacting credit grantors to dispute charges and close accounts including credit, 
debit and medical insurance cards; assist with freezing credit files; contact government agencies, 
o It is recognized that identity theft can happen months and even years after an incident To 
offer added protection, you will receive ExtendCARE™, which provides you with the same 
high-level of Fraud Resolution support even after your ProtectMylD membership has 
expired. 


$1 Million Identity Theft Insurance: Immediately covers certain costs including lost wages 
private investigator fees, and unauthorized electronic fund transfers. (Identity theft insurance is underwritten’ 

com P an r subsidiaries or affiliates of AIG. The description herein is a summary and intended for in format ional purposes 

™ndWo d n. d a dTv r a i ' C °" dmor,S and exc,usi0 “ ofthe policies described. Please refer to the actual policies forTnns 
conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.) 


Once your enrollment in ProtectMylD is complete, you should carefully review your credit report for 
inaccurate or suspicious items. If you have any questions about ProtectMylD, need help understanding 
something on your credit report or susp ect that an item on your credit report may be fraudulent, please 
contact Experian’s customer care team atHHjHHH 
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Placing a Fraud Alert 


Whether or not you choose to use the complimentary 12 month credit monitoring services, we recommend 
that you place an initial 90-day “Fraud Alert” on your credit files, at no charge. A fraud alert tells creditors 
to contact you personally before they open any new accounts. To place a fraud alert, call any one of the 
three major credit bureaus at the numbers listed below. As soon as one credit bureau confirms your fraud 
alert, the) will notify the others. 


Equifax 

P.O. Box 105069 
Atlanta, GA 30348 
www.equifax.com 
1-800-525-6285 


Experian 
P.O. Box 2002 
Allen, TX 75013 
www.experian.com 
1-888-397-3742 


TransUnion 
P.O. Box 2000 
Chester, PA 19022 
www.transunion.com 
1-800-680-7289 


3- Consider Placing a Security Freeze on Your Credit File . 

If you are very concerned about becoming a victim of fraud or identity theft, you may request a “Security 
Freeze” be placed on your credit file. A security freeze prohibits, with certain specific exceptions, the 
consumer reporting agencies from releasing your credit report or any information from it without your 
express authorization. Youmay place a security freeze on your credit report by sending a request in writing, 
by mail, to all three nationwide credit reporting companies. To find out more on how to place a security 
freeze, you can use the following contact information: 

Equifax Security Freeze Experian Security Freeze 

PO Box 105788 PO Box 9554 

Atlanta, GA 30348 Allen, TX 75013 

https://www.freeze.equifax.com http://experian.com/freeze 
1-800-685-1111 1-888-397-3742 


TransUnion Security Freeze 
P.O. Box 2000 
Chester, PA 19022 

http://www.1ransunioii.com/securityfreeze 

1-800-680-7289 


4. Obtaining a Free Credit Report . 

Under federal law, you are entitled to one free credit report every 12 months from each of the above three 
major nationwide credit reporting companies. Call 1-877-322-8228 or request your free credit reports online 
at www.annualcreditreport.com. Once you receive your credit reports, review them for discrepancies. 
Identify any accounts you did not open or inquiries from creditors that you did not authorize. Verify all 
information is correct. If you have questions or notice incorrect information, contact the credit reporting 
company. 


5. Additional Helpful Resources . 

Even if you do not find any suspicious activity on your initial credit reports, the Federal Trade Commission 
(FTC) recommends that you check your credit reports periodically. Checking your credit report 

periodically can help you spot problems and address them quickly. 


If you find suspicious activity' on your credit reports or have reason to believe your information is being 
misused, call your local law enforcement agency and file a police report. Be sine to obtain a copy of the 
police report, as many creditors will want the information it contains to absolve you of the fraudulent debts. 
\ ou may also file a complaint with the FTC by contacting them on the web at www.ftc.gov/idtheft, bv 
phone at 1-877-IDTHEFT (1-877-438-4338), or by mail at Federal Trade Commission, Consumer 
Response Center, 600 Pennsylvania Avenue, NW, Washington, DC 20580. Your complaint will be added 
to the FTC’s Identity Theft Data Clearinghouse, where it will be accessible to law enforcement for their 
investigations. In addition, you may obtain information from the FTC about fraud alerts and security 
freezes. 
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6- Reporting Identity Fraud to the IRS . 


Ifyou believe that you are a victim of identity fraud AND it is affecting your federal tax records (or may 
affect them at some time m the future), such as your attempt to file your federal tax returns electronically 
was rejected or ifyou received a notice from the IRS indicating someone was otherwise using your Social 
Security number, it is recommended that you do the following: 

• Contact your tax preparer, if you have one. 

• File an Identity Theft Affidavit (Form 14039) with the IRS. The form can be downloaded at: 
https://www.irs. go v/pub/irs-ndf/fl4039.pdf 

Call the IRS at (800) 908-4490, ext. 245 to report the situation. The unit office is open Monday 
through Friday from 7 am to 7 pm. 

• Report the situation to your local police department. 

Additional information regarding preventing tax related identity theft can be found at 
http://www.irs.gov/uac/Identitv-Protection. 
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